Liftings for Differential Privacy

Abstract : Recent developments in formal verification have identified approximate liftings (also known as approximate couplings) as a clean, compositional abstraction for proving differential privacy. There are two styles of definitions for this construction. Earlier definitions require the existence of one or more witness distributions, while a recent definition by Sato uses universal quantification over all sets of samples. These notions have different strengths and weaknesses: the universal version is more general than the existential ones, but the existential versions enjoy more precise composition principles. We propose a novel, existential version of approximate lifting, called-lifting, and show that it is equivalent to Sato's construction for discrete probability measures. Our work unifies all known notions of approximate lifting, giving cleaner properties, more general constructions, and more precise composition theorems for both styles of lifting, enabling richer proofs of differential privacy. We also clarify the relation between existing definitions of approximate lifting, and generalize our constructions to approximate liftings based on f-divergences.
Complete list of metadatas

Cited literature [1 references]  Display  Hide  Download

https://hal.sorbonne-universite.fr/hal-01541197
Contributor : Thomas Espitau <>
Submitted on : Sunday, June 18, 2017 - 3:35:41 PM
Last modification on : Thursday, March 21, 2019 - 1:04:52 PM
Long-term archiving on : Friday, December 15, 2017 - 5:10:57 PM

File

1705.00133.pdf
Files produced by the author(s)

Identifiers

Citation

Gilles Barthe, Thomas Espitau, Justin Hsu, Tetsuya Sato, Pierre-Yves Strub. Liftings for Differential Privacy. ICALP 2017, Jul 2017, Varsovie, Poland. ⟨10.4230/LIPIcs.ICALP.2017⟩. ⟨hal-01541197⟩

Share

Metrics

Record views

106

Files downloads

202